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What is claimed is: 



A method for purchasing i-bems over a network 
^ing a secure communication device, the secure 
communication device including ar host . processor , a 
secure memory that includes a /Laser-scribed encryption 
key, and a non-secure memory^ for storing encrypted 
data, wherein sensitive data is encrypted within the 
10 secure memory using the ylaser-scribed encryption key 

and stored as encrypteu data in the non-secure memory, 
the method comprisira:g the steps of: 

retrieving arr encrypted credit card number and an 
encrypted secret? key from the non-secure memory; 
15 decryptiprg the encrypted credit card and secret 

key with th^ laser-scribed encryption key; 

encr^ypting the credit card number with a 
communication encryption key, the communication 
encryption key being related to the secret key; and 
20 / and transferring the credit card number, as 

encrypted with the communication encryption key, over 
he network to a destination. 
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2. The method as clkimed in claim 1 wherein the 
encrypted data is decrypted within the secure memory 
using the laser-scribed encryption key and stored 
within the secure memory j for use by the host processor, 
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3. The method as cfLaimed in claim 1 further 
comprising the steps of; 

receiving a personajl identification number (PIN) 
from a user; 

decrypting an encr^jpted PIN with the laser-scribed 
encryption key; 

wherein the step oi transferring the encrypted 
credit card number step I is performed when the decrypted 
PIN and the PIN received from the user compare. 



4. The method as claimed in claim 1 further 
comprising the steps of: 

.c information from a user; 
biometric information for the 
ibed encryption key; 
f transferring the encrypted 
is performed when the decrypted 
biometric information Compares with the biometric 
information received fjrom the user. 



receiving biometri 
decrypting stored 

user with the laser-sci 
wherein the step c 

credit card number step 
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claimed in claim 1 wherein the 

key is a common session key 
further comprises the step of 
key using the secret key and 
the destination. 
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5. The method as 
communication encrypt i 
and wherein the method 
generating the session 
information provided by 

6. The method as claimed in claim 1 wherein the 
host processor and secure memory are fabricated on an 
integrated circuit chipl and the encrypted data is 
stored in a non-volatil$ memory, 
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7. The method as claimed in claim 1 whered/A the 
laser-scribed encryption key is generated by i^ser- 
scribing a semiconductor die during fabricatix)n of the 
secure memory to create a plurality of fixe>a "ones" and 

5 "zeroes" which make up the laser-scribed ^cryption 
key. 

8. The method as claimed in cla/im 1 wherein the 
laser-scribed encryption key is gerverated burning one- 

10 time programmable fuses on a semiconductor die during 
fabrication of the secure memory/ to create a plurality 
of fixed "ones" and "zeroes" w^ich make up the laser- 
scribed encryption key, 

^15 9. The method as claimed in claim 1 wherein the 

secure memory includes blocking gates coupled between 
the laser-scribed encryption key and encryption logic 
circuitry, the blockirig gates being comprised of logic 
gates and have a bLocking control signal input 
20 preventing access/to the laser-scribed encryption key 
by the encryption logic circuitry. 
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10. The/ method as claimed in claim 1 wherein the 
laser-scribe'a encryption key is unique for each secure 
memory of plurality of secure memories of different 
processing systems . 
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IX. The method as claimed in claim 1 wherein the 
laserZ-scribed encryption key is randomly generated for 
each" secure memory of a plurality of secure memories of 
dif'ferent processing systems. 
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12. A method for transferring sensitive data over 
a non-secure communication channel using a secu-re 
communication device, the secure communicatiorr device 
including a host processor, a secure memory ychat 
5 including a laser-scribed encryption key, amd a non- 
secure memory for storing the sensitive data in 
encrypted form, wherein sensitive data ys encrypted 
within the secure memory using the laser-scribed 
encryption key and stored as encrypted data in the non- 
10 secure memory, the method comprising the steps of: 

retrieving the encrypted sensitive data and an 
encrypted secret key from the n<Dn-secure memory; 

decrypting, in the secure^ memory, the encrypted 
sensitive data and the secret key with the laser- 
15 scribed encryption key; 

(encrypting the decrypted sensitive data with a 
session encryption key j^lated to the secret key; and 

transferring the /sensitive data encrypted with the 
session encryption k^y over the non-secure 
20 communication channel to a destination. 



13. The method as claimed in claim 12 further 
comprising the/steps of: 

receivin;^ biometric information from a user; 
25 decrypting stored biometric information for the 

user with zhe laser-scribed encryption key; 

whei;^in the step of transferring the encrypted 
sensitive data step is performed when the decrypted 
biomet/ic information compares with the biometric 
30 inf citation received from the user. 
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14. The method as claimed in claim 12 whe/ein the 
host processor and secure memory are fabricatefa on an 
integrated circuit chip, and the encrypted data is 
stored in a non-volatile memory- 



10 



15. The method as claimed in clairfi 12 wherein the 
laser-scribed encryption key is generated by laser- 
scribing a semiconductor die during fabrication of the 
secure memory to create a plurality^ of fixed "ones" and 
"zeroes" which make up the laser-scribed encryption 
key. 



16. The method as claimefcl in claim 12 wherein the 
laser-scribed encryption keW^ is generated by burning 
15 one-time programmable fuses/ on a semiconductor die 
during fabrication of the /secure memory to create a 
plurality of fixed "ones/ and "zeroes" which make up 
the laser-scribed encr^tion key. 

20 17. The method/as claimed in claim 12 wherein the 

secure memory inclujaes blocking gates coupled between 
the laser-scribed yencryption key and encryption logic 
circuitry, the bl/ocking gates being comprised of logic 
gates and have d blocking control signal input 

25 preventing access to the laser-scribed encryption key 
by the encryption logic circuitry. 
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18. "yhe method as claimed in claim 12 wherein the 
laser-scribed encryption key is randomly generated for 
each sec\/re memory of a plurality of secure memories of 
different processing systems. 
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.9. The method as claimed in claim 12 wherein the 
las^r-scribed encryption key is unique for each secure 
memory of a plurality of secure memories of different 
processing systems . 
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